ClamAV regression

2012-08-1600:00:00

ubuntu.com

6.5 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04

Packages

clamav - Anti-virus utility for Unix

Details

USN-1482-1 fixed vulnerabilities in ClamAV. The updated package could
fail to properly scan files in some situations. This update fixes
the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that ClamAV incorrectly handled certain malformed TAR
archives. A remote attacker could create a specially-crafted TAR file
containing malware that could escape being detected. (CVE-2012-1457,
CVE-2012-1459)

It was discovered that ClamAV incorrectly handled certain malformed CHM
files. A remote attacker could create a specially-crafted CHM file
containing malware that could escape being detected. (CVE-2012-1458)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchlibclamav6< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchclamav< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchclamav-daemon< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchclamav-dbg< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchclamav-freshclam< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchclamav-milter< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu12.04noarchlibclamav-dev< 0.97.5+dfsg-1ubuntu0.12.04.3UNKNOWN
Ubuntu11.10noarchlibclamav6< 0.97.5+dfsg-1ubuntu0.11.10.3UNKNOWN
Ubuntu11.10noarchclamav< 0.97.5+dfsg-1ubuntu0.11.10.3UNKNOWN
Ubuntu11.10noarchclamav-daemon< 0.97.5+dfsg-1ubuntu0.11.10.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	libclamav6	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	clamav	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	clamav-daemon	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	clamav-dbg	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	clamav-freshclam	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	clamav-milter	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	12.04	noarch	libclamav-dev	< 0.97.5+dfsg-1ubuntu0.12.04.3	UNKNOWN
Ubuntu	11.10	noarch	libclamav6	< 0.97.5+dfsg-1ubuntu0.11.10.3	UNKNOWN
Ubuntu	11.10	noarch	clamav	< 0.97.5+dfsg-1ubuntu0.11.10.3	UNKNOWN
Ubuntu	11.10	noarch	clamav-daemon	< 0.97.5+dfsg-1ubuntu0.11.10.3	UNKNOWN